Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/409752-9d8c-40f5-9125-9c06737979d1/1/DQMTeXANNd0Akr0GHGA-bLJWGnU.mft
File: DQMTeXANNd0Akr0GHGA-bLJWGnU.mft (raw, json)
Hash identifier: bvXpb04L+IL3DnO3Sswpb6MrdHUSmTNupSNZA+Di84E=
Subject key identifier: FA:5F:5C:E9:14:5A:0A:69:15:69:16:8E:C2:96:72:12:1A:95:F7:49
Authority key identifier: 0D:03:13:79:70:0D:35:DD:00:92:BD:06:1C:60:3E:6C:B2:56:1A:75
Certificate issuer: /CN=0d031379700d35dd0092bd061c603e6cb2561a75
Certificate serial: 019F92B61D9B7155EB0D91C4423CF3616DC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQMTeXANNd0Akr0GHGA-bLJWGnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/409752-9d8c-40f5-9125-9c06737979d1/1/DQMTeXANNd0Akr0GHGA-bLJWGnU.mft
Manifest number: 0456
Signing time: Fri 24 Jul 2026 06:00:36 +0000
Manifest this update: Fri 24 Jul 2026 06:00:36 +0000
Manifest next update: Sat 25 Jul 2026 06:00:36 +0000
Files and hashes: 1: DQMTeXANNd0Akr0GHGA-bLJWGnU.crl (hash: lxkRl1HgFzA2bs47y+RMJyx0JBXRWTMbhpy6cP97Kk0=)
2: Lpz2qCyi_pclLucNORkTQKN3m6Y.roa (hash: Q2l7VmCgH626w3ti2dW3eJLOPal4uK77R7IRCnO8dUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/409752-9d8c-40f5-9125-9c06737979d1/1/DQMTeXANNd0Akr0GHGA-bLJWGnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/409752-9d8c-40f5-9125-9c06737979d1/1/DQMTeXANNd0Akr0GHGA-bLJWGnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DQMTeXANNd0Akr0GHGA-bLJWGnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b6:1d:9b:71:55:eb:0d:91:c4:42:3c:f3:61:6d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d031379700d35dd0092bd061c603e6cb2561a75
Validity
Not Before: Jul 24 06:00:36 2026 GMT
Not After : Jul 25 06:00:36 2026 GMT
Subject: CN=fa5f5ce9145a0a691569168ec29672121a95f749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2a:ae:ab:20:58:4c:33:78:90:5c:ef:b3:71:
ab:3a:31:0d:0a:2e:d0:5d:99:cf:56:a7:b3:ae:47:
62:a1:11:52:f2:34:50:85:b6:37:c6:9c:a3:6b:85:
95:87:4d:8f:bb:27:7d:95:8e:3e:2c:e8:d8:99:62:
93:f4:46:11:09:a0:ef:6e:3c:6b:e5:53:a9:6e:7c:
d2:9f:74:7d:d6:e6:a7:86:da:d4:51:9c:04:17:e7:
87:4b:26:01:a1:13:29:52:0e:93:b3:05:e9:40:7d:
d7:54:d5:6e:c6:30:b4:f6:f5:fe:ca:f8:e4:0b:a1:
17:de:bb:7d:c0:3a:76:26:38:46:d0:f1:35:be:81:
1e:cd:e7:fa:b5:9c:38:e9:a5:82:3c:d3:8e:b4:1a:
a9:80:b3:4f:f4:e7:25:f6:ab:29:0c:52:f8:56:a1:
b1:d1:07:9b:89:c5:e2:69:b5:84:67:d7:c1:e7:4e:
93:43:3f:54:3a:6a:ff:44:44:a5:d2:76:b2:ee:95:
57:1f:b0:b0:87:47:15:a3:92:54:43:d1:20:25:e2:
73:8c:ce:94:da:32:3c:a8:d6:00:5d:e8:1f:49:97:
7f:06:20:f4:9f:09:bd:e0:f5:6e:9f:c5:73:51:78:
11:78:46:93:ed:4c:87:5a:fe:66:82:a2:5f:c5:df:
d8:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:5F:5C:E9:14:5A:0A:69:15:69:16:8E:C2:96:72:12:1A:95:F7:49
X509v3 Authority Key Identifier:
keyid:0D:03:13:79:70:0D:35:DD:00:92:BD:06:1C:60:3E:6C:B2:56:1A:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQMTeXANNd0Akr0GHGA-bLJWGnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/409752-9d8c-40f5-9125-9c06737979d1/1/DQMTeXANNd0Akr0GHGA-bLJWGnU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/409752-9d8c-40f5-9125-9c06737979d1/1/DQMTeXANNd0Akr0GHGA-bLJWGnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:a6:ba:da:d2:23:0e:fd:18:04:94:51:e9:ca:5e:5e:42:48:
44:57:b1:64:9a:ae:83:8b:e6:16:16:6b:eb:09:b0:a5:57:4c:
df:5b:9e:64:8e:36:70:ff:48:a0:0c:f7:bf:11:a9:f2:36:10:
0c:38:39:8b:11:21:aa:c5:39:38:ba:9a:04:08:4d:54:39:0d:
12:91:57:36:41:18:62:c8:19:e8:ab:10:52:ec:ed:e7:78:57:
f2:e9:1e:52:7d:ad:95:a6:15:1c:24:22:07:11:0d:c4:fe:e3:
29:d1:9c:73:35:9b:c0:77:e6:f8:63:78:66:e4:26:08:ce:ec:
87:6b:f9:c2:94:d4:d7:63:88:c6:3f:cf:52:98:ba:4a:9f:e4:
0c:27:b2:f7:49:be:37:a3:e6:f9:21:c0:49:ce:9d:6a:d2:37:
a8:4e:34:e7:28:f8:4f:b9:ee:1f:64:a3:11:97:40:ec:88:d0:
46:79:54:cd:a5:3f:6e:7b:0e:97:e2:1f:e1:53:b5:92:0e:e8:
3e:20:4d:17:ef:b4:e9:7f:94:07:e5:f5:85:9c:42:f1:3d:25:
84:dd:7e:22:0b:0a:a1:00:07:51:37:63:f5:c4:d8:a4:41:03:
0c:27:b4:d2:96:72:a9:50:0e:28:ff:18:a9:8b:74:e2:f8:9b:
9f:02:8f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:40:09 2026 by rpki-client